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CLAIMS 



9* 



1. A method of providing a value note comprising: 

providing first information representative of public key information for a bearer, or 
from which public key information fo : a bearer can be verified; 

providing second information representative of a commodity represented by the value 
note; and 

calculating third information representative of an issuer's signature dependent on the 
first and second information and verifiable by means of public key information for the issuer. 



ling flp/ela)m 1, whereii 



10 2. A method according Jp/6la|m 1, wherein the first information represents public key 
information for the bearepr * 



A method acconzUng to claim 1 -qp3t further comprising providing information on when 
the value note is due to expire. 





4. A method according to clai n 3, wherein the expiry information is included in the 
^^calculation of the signature. 



p\r M 5. A method according to claim 1, 2, 3 or 4 , further comprising providing identification 
[|0 information for uniquely identifying the value note. 




Cy/6. A method according to claim 5, wherein the identification information comprises a 
serial identification strir 



\fY ^ v 7. A method according to claim 5 
the calculation of the signature. 



er-6, wherein the identification information is included 



Qy v y87 A method according -any -preceding claim, further comprising providing valid-from 



information representing from when the value note is available for redemption. 
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A method according to claim 



V&> 9 

tj^^^al^ation of the signature. 



8, wherein the valid-from information is included in the 



t^ 5 
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10. A method according tetany preceding claim, further comprising communicating the 
value note electronically./ 



11. A method according to claim 10, wherein the value note is sent through an electronic 
public communication system. 



7 



12. A method accoj< 
type signature. 



ding to any pi t ccJing claim, wherein the issuer's signature is an RSA 

A 



1 



10 13. A method of handling a value iibte, comprising: 

receiving a value note comprising first information representative of a bearer's public 
; key or from which bearer's public key can be verified, second information representative of a 
commodity represented by the value note, and third information representing an issuer's 
^^^sigpature which can be verified by in brmation including the first and second information and 
yfniblic key information for the issuer; 

providing redemption instruction information for the value note; and 
providing a bearer's signature which is dependent on the payment instruction 
information and is verifiable from said first information. 



. A method according to claim 13, wherein the bearer's signature is an RSA type 
ay signature. / 





15. A method according to claim 12j wherein the value note is as provided by the 

method or any of claims 1 to 12. 



instruction information and a secret kgy related to the first information. 





^ yf6. A method according to claim 13, iA?6f-i5r y wherein the step of providing the bearer's 
Xj7 signature comprises calculating the sigijafoire based on information including the redemption 



17. A method according /o claim 16, wherein said information on which the bearer's 
signature is calculated includes information from the value note. 
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18. A method according to claim iL t4r 4& r 16 o^4^, wherein the redemption instruction 
information includes a reference to traijsfer at least a proportion of the commodity to a first new 
value note. 

5 19. A method according to clairr 18, wherein the redemption instruction information 
includes replacement first information for the new value note. 

fV Cy^° v2p^ A method according Jtyclaim 18 er-t9; wherein the first new value note has a different 
/"bearer's public key from tire value note being redeemed. 

i 

fV 21. A method according to claim 18, t 9 ui 20 , wherein the redemption instruction 

C^^^^formation includes a reference to tra isfer the or a remainder of the commodity to a second 
\m|P V^ew value note. 

A method according to claim 21<wherein the second new value note has a different 
bearer's public key from the valuejidte being redeemed. 




23. A method according to claim 18, 19, 20, 21 oi 1 22, wherein the redemption instruction 
information inclucje^a reference to transfer the commodity represented by the first new value 
note to a replacement new value note if the first new value note is not redeemed within a 
predetermined period. 



25 
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24/ A method according to clzuflf 23, wherein the replacement new value note has a 
ferenUDeafefVpuBncTcey^ 



formation, and wherein the method comp 
value note handling authority. 



25. A method according to^any-of 1 ^ ms-43-te--24, wherein the instruction information 
includes an identification reference for the! or each value note referred to in the instruction 

ises communicating the instruction information to a 



(V ^6. A method according to ^ any of claims 13 to 25 -, further comprising communicating the 

P V value note, the redemption instruction information and the bearer's signature information to a 



7- 



value note handling Authority. 
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27. A method ^apc6rding to claim 25 wherein the communication is effected over an 

electronic puJ>H£communication system. 




5 28. A method of handling redemption instruction information and bearer signature 
information associated with a value lote, the method comprising performing at least one 
verification prior to redeeming the vaue note in accordance with the redemption instruction 
formation, the verification comprising : 

verifying that the bearer signatu e information matches information including at least the 
10 payment redemption instruction infon nation using public key information for the bearer 
presented in the value note or in the instruction redemption information. 

A method according to/claim 28, wherein the redemption instruction information is 
associated with a plurality (Rvalue notes. 

_ A-jngth ed- according to claim 28, wherein th e--mstmctiun redemption iiifonnation is 




provid ed by th e method o f^ny-o£daims -l 3 to 7T .. 



fy 




A method according to 



aim 28, -29 ui 30, wherein the redemption instruction 



information and the bearer signature information are received without a value note, and the 



comprises retrieving value 
ction redemption informati 



lote information for one or more value notes identified in 



A method according to^any- ^f cl aims 28 U>- 31 , further comprising verifying that an 
25 issuer signature included in the value {note matches information including the bearer public,key 
information and the commodity represented by the value note, using public; key information for 
the issuer. 

A method according to afty-of-ciaMfls-^8-tcr^ further comprising verifying that the 




A 

alue note has not previously been presented for redemption 

34. A method 

value note has not Previously been redeemed validly 



rding tet any of c l aims 28 t e-33-, further comprising verifying that the 
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35. A method according to claim 33 e!H34; wherein the value note and/or the redemption 
instruction information includes identification information for uniquely identifying the value 
note, and the verification comprises ascertaining whether a value note bearing the same 
identification information has previously bsen accepted. 



36 



A method according to ^afty-ef-€ iaiim J aiin 28 tu 3 5~, further comprising verifying 
whether a counter signature matches pu >lic key information in the value note for a counter 



signatory. 




A. 

endorsement signature in the value note 



using public key information for the mess ige endorsing signatory 



A method according to A atiy o f ila|iiii> 28 to 36; further comprising verifying whether an 

matches information including a predefined message 



0/o 



A method according to any of claims 28 -to-3T, wherein the value note includes expiry 
time and/or date information representing a time and/or date of expiry, and the method further 
comprises testing the value note on the basis of the expiry information. 

39. A method according to^afiy-^f4laims^8-4a^8-, wherein the value note includes valid- 
from time and/or date information representing a time and/or date from which the value note 
may validly be redeemed, and the method further comprises testing the value note on the basis 
of the valid-from information. 



25 



.A 



note comprises issuing a first new 
commodity of the value note being redi 



40. A method according to^ny-of^ &ims-28-te-39r wherein the step of redeeming the value 



/alue note representing at least a proportion of the 
med. 




lea 



^1. A method according to claim 40, wherein first new value note includes different public 
key information from the (/alue note being redeemed. 




42. A method according to claim 40 eF~4+, wherein the step of redeeming the value note 
comprises issuing a second new value ijote representing the or a remainder of the commodity of 
e value note being redeemed. 



(S3? 
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43. A method according to claim 42, wherein the second new value note includes a different 
bearer public key from tfje^alue note being redeemed. 




A rja^thod according to claim 40, 41, 42 x >r 43, wherein the step of redeeming the value 
iprises issuing a replacement new value note if said first new value note is not 
within a predetermined period. 





45/ A method acp6rding to claim 44, wherein the replacement value note includes a 
different bearer's pdblic key from the value note being redeemed. 

afar. v g , . . „ 

46. A method according toany-e -etaims- 40 - to - 45 , wherein at least one new value is issued 
which includes information indicative of a time and/or date from which the new value note can 
be redeemed, and wherein the time apd/or date is later than the time and/or date, respectively, 
of issuance. 



A method according to any o 

A. 




ru 

f : 



claims 2 8- to -46, further comprising communicating the 



or each new value note electronically tp a remote party corresponding to the source of the value 
note being redeemed. 

A method according to claim 47, wherein the communication is effected over a public 
communication ^stem . 

A method wherein an electron c representation of a commodity is issued by an issuing 
authority, the electronic representation including information representing a time and/or date 
v from which the electronic representamon is available for redemption, said time and/or date 
ripAjSling later than the time and/or date of issuance, whereby the electronic representation is not 
/ available for redemption immediately after issuance. 



A method according to claim 49, wherein the commodity is money. 

A method according to claim Ijj ep-te-fmy-slaim-4epeftden ^ wherein the method 

string message, generating a second character string 





\fy y X $omprises generating a First character 
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message from said first message in the ledemption instruction information for inclusion in the 
new value note. 




52. A method according to claim 51, further comprising the steps of: 

the redemption instruction information, and the bearer's 
signature information to a value note hi ndling authority; 

issuing a new value note including the blinded second character string message, in 
rdance with the redemption instruction information; 

communicating the new value r ote to a respondent; and 

information from the respondent dependent on the first 
and related to the blinding function such that the 
gainst both the first character string message and the 



providing endorsement signatui e 
and second character string message 
endorsement signature is verifiable 2 
second character string message; and 
communicating the value note 
to the value note handling authority 



and the respondent's endorsement signature information 



53. A method according toyclaim 52, further comprising the step of unblinding the^eetfnd 
character string message by me respondent to yield the first character string jnesSage prior to 
providing the respondent's endorsement signature information. 

54. A method of encrypting data, conjprising: 
applying a blinding function to tfierypt said dji^using first secret key information; 
calculating a digital signature y^M^S^^Bmrt function which is dependent firstly on 

said blinded data or on blinded hashM^infi6rmation calculated from unblinded data, and 
secondly on second secret key infoj^tiS^in such a manner that the signature is verifiable 
using public key information rejaffed to the second secret key; 

composing a message including thfe encrypted data, the digital signature, and encrypted 
information relating thirst secret key; 

whereby iys possible to verify from said encrypted data and from said digital signature 
that the signage matches the encrypted! data without decrypting the encrypted data, and 
whereby, With knowledge of the encryption used to encrypt the first secret key information in 
the message, it is possible to ascertain the first secret key information and to decrypt said 
enofVoted data. 
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55. A method of encrypting and transmitting data, comprising: 

applying a blinding function to the data to encrypt said data using first secret key 
information; 

composing s first message including the encrypted data and/encrypted information 
relating to the first secret key; 

transmitting the first message to a first receiver; 

calculating a digital signature using a signature function which is dependent firstly on 
said blinded data or on blinded hashing information for the blinded data, and secondly on 
second secret key information, in such a manner that die signature is verifiable using public key 
information related to the second secret j 

composing a second message incjijding/fne encrypted data, the encrypted information 
relating to the first secret key and the dig^^ignatj&re; 

transmitting the second message to^ second receiver. 



56. A method according to ydaim 55, further comprising calculating said hashing 
information for the unblinded daja and including said hashing information in the first message. 

57. A method according to claim 55 further comprising the following steps after 
receipt of the first message by the first receiver: 

de-crypting the encrypted information relating to the first secret key; and 
un-blinding/the encrypted data using the de-crypted first secret key information. 

58. A metnod according to claim 55, 56~or-5?; further comprising the following step after 
receipt of the second message by the second receiver: 

verifying whether the digital signature matches the encrypted data. 

59. A method comprising 

(a) a first method ^sxlefhied in any of claims 1 to 12 or 51; and 

(b) a second methdp-a^efined in any of claims 13 to 27. 



60. A method according to claim 59\further comprising a third method as defined in any of 
claims 28 to 48. 



0 
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61 . A value note comprising: 

first information representative ( f public key information for a bearer, or from which 
public key information for a bearer can t e verified; 



second information representative 
third information representative 



of a commodity represented by the value note; and 
of an issuer's signature which is verifiable from 
information including the first informatic n, the second information and public key information 
for the issuer. 



10 62. A record carrier on which is reco rded value note information including: 

first information representative or public key information for a bearer, or from which 
^j^^ublic key information for a bearer can h b verified; 
' second information representative 



third information representative 



15 
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of a commodity represented by the value note; and 
of an issuer's signature which is verifiable from 
information including the first information, the second information and public key information 
for the issuer. 

63. A transmission signal representing a value note and comprising: 
first information representative on public key information for a bearer, or from which 

public key information for a bearer can b& verified; 

second information representative of a commodity represented by the value note; and 
third information representative df an issuer's signature which is verifiable from 

information including the first information ,\ the second information and public key information 

for the issuer. 

64. A value note as defined in / clAn / 61, or a record carrier as defined in claim 62, or a 
signal as defined in claim 63,^fUrt^ comprising identification information for uniquely 
identifying the value note. 



30 65. A method of providing redempti 



ion ins 

C^)^ ^each being as defined in claim 64, the methoc 



miction information for one or more value notes 



comprising: 

providing a list of identification information for identifying each existing value note to 
be used in the transaction; 



60 

x(iests, e 




providing a list of redemption requests, each request including information representing 
a result of the transaction, and a commocity value associated with that result; 

providing a signature informatics i representing a bearer's signature which is verifiable 
from the information in the instruction ahd/or from information in said value notes, and public 
key information for the bearer. 




A method according to claim 65, wherein at least one redemption request jncludes a 



request to issue a new 




value jiote. 



67. A method according to ctaim 65 or 66, further comprising providing information 
presenting public key information for the bearer. 



A method according to claim 65, 6 6 o r 6 7 , further comprising providing information 
representing the total /slue of the existing value notes, which total value is to^diyided or 
allocated in accordance with the list of redemption requests. 
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69. A method according to claim 
istruction information, with or with 



65, -66r-67-OF-6fr, further comprising communicating the 
Dut the individual value notes referred to in the instruction 



information, to a money handling aut lority. 



70. A method as defined in any of claims 1 to 60 or 65 to 69, or a value note as defined in 
claim 61, or a record carrier as defined in claim 62, or a transmission signal as defined in claim 
63, wherein the information representing the value represents a fixed absolute value. 



25 71. A method as defined 
claim 61, or a record carrier 
63, wherein the information! 
value. 



of claims 1 to 60 or 65 to 69, or a value note as defined in 
claim 62, or a transmission signal as defined in claim 
representing the value defines a formula representing a variable 



30 72. A method as defined in any of islaims 1 to 60 or 65 to 69, or a value note as defined in 
claim 61, or a record carrier as defined ifi claim 62, or a transmission signal as defined in claim 
63, wherein the information representinguhe value represents a fixed or variable value by 



reference to an identifying label. 



J- 



# 
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73. An electronic representation (bf a commodity, the representation including first time 
and/or date information representirg a time and/or date up to which the electronic 
representation is guaranteed, and second time and/or date information representing a time 
5 and/or date later than the first time ai id/or date and up to which the electronic representation 
*ay still be valid but without a guarantee. 



W7 



74. 



Apparatus for carrying out a method as defined in^ any of claims 1 to 60ror-65 to 72. 



